Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5675dc02-c647-3581-bee2-523a1d5998c9.roa
File:                     5675dc02-c647-3581-bee2-523a1d5998c9.roa (raw, json)
Hash identifier:          4ifFYFvPvtSs44bTAwFdwajk2jDQf3ZgW4bbZC6l1JU=
Subject key identifier:   49:F1:F3:BE:19:88:B8:76:B9:2B:14:57:71:85:C2:F9:7E:68:09:59
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EA5AA9943399F87D18092F9D8
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5675dc02-c647-3581-bee2-523a1d5998c9.roa
Signing time:             Tue 28 Jul 2026 09:00:11 +0000
ROA not before:           Tue 28 Jul 2026 09:00:11 +0000
ROA not after:            Mon 26 Oct 2026 09:00:11 +0000
asID:                     19905
IP address blocks:        2604:2d80:3f00::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a5:aa:99:43:39:9f:87:d1:80:92:f9:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 28 09:00:11 2026 GMT
            Not After : Oct 26 09:00:11 2026 GMT
        Subject: CN=8c8984a2-29ca-41d4-9c69-576370fb0da2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d9:01:85:5b:7c:96:1b:12:1e:38:6d:c0:3a:
                    cb:b3:f4:a6:de:8b:87:ed:de:a3:d8:57:db:f8:e9:
                    95:ad:8d:b9:c9:3a:7d:80:98:ea:01:8f:f6:45:3d:
                    2e:48:6d:f4:c6:4f:83:72:aa:10:ed:55:f4:5c:f4:
                    e4:59:ce:77:2c:e6:b5:54:c0:fe:84:de:76:d7:eb:
                    21:69:8b:e1:2d:a3:b5:d7:5a:25:bb:44:8b:9a:70:
                    70:d0:cc:63:f4:51:11:3f:c2:c4:6c:b9:88:b4:04:
                    46:12:82:b7:c9:53:59:3f:84:de:3e:c0:bd:49:2c:
                    40:b9:e4:f5:d8:f8:85:c9:74:65:ca:92:1e:76:12:
                    64:38:dd:ca:eb:da:90:5a:8b:89:28:07:c7:da:dd:
                    9c:26:d6:9e:83:34:02:0c:ec:e6:41:dc:16:db:75:
                    9e:99:92:ea:d0:ea:8c:ca:78:db:0d:66:bb:66:52:
                    4b:68:5e:6a:ec:24:a5:23:c5:cf:59:42:44:f4:9b:
                    c4:4e:79:35:6e:65:23:4a:20:41:5f:03:6a:f7:b9:
                    0c:9a:e2:e7:b4:b0:90:fc:ac:75:3c:2f:23:fb:f8:
                    4c:68:82:a4:97:52:18:cb:e6:b1:a7:ca:49:ae:8a:
                    c6:c2:40:35:77:30:5d:fc:54:78:33:4a:9c:2d:18:
                    3d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:F1:F3:BE:19:88:B8:76:B9:2B:14:57:71:85:C2:F9:7E:68:09:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5675dc02-c647-3581-bee2-523a1d5998c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:3f00::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:77:ea:be:35:2d:78:a6:71:36:ae:f0:e5:5c:b4:8e:62:0f:
         f1:d6:88:8b:19:99:f4:c9:03:07:67:0e:ad:d7:02:a2:fe:f2:
         51:15:2f:ed:25:16:cb:23:ca:de:5f:39:9b:0c:52:82:6f:12:
         2b:cc:83:2b:95:1b:eb:ab:17:18:49:70:1d:c7:c0:43:51:36:
         29:de:b4:37:a0:81:59:9d:bd:4c:48:de:a9:58:0c:28:71:c2:
         4f:e2:a0:9c:93:25:10:3f:4b:57:40:2f:89:13:91:9b:bd:d6:
         b4:56:0c:7f:47:1f:1c:6b:42:75:aa:73:c7:84:0f:ac:fd:be:
         0a:6b:7d:c0:8d:a5:39:12:9b:9e:d9:54:5d:cc:35:38:44:3f:
         dd:0f:85:5c:a9:5a:87:d4:06:ed:0b:ec:cd:05:18:3c:e0:ff:
         a5:fe:5f:92:94:1d:cb:fd:43:77:25:15:8f:b4:c0:49:4c:8f:
         13:19:84:f0:9d:01:b4:94:40:d4:a4:76:2d:6a:04:64:a0:4a:
         19:82:70:f4:35:58:7e:7f:ef:3b:d7:23:4e:57:f9:44:83:ed:
         4a:b1:7e:3f:83:d1:7b:fb:23:d8:5c:b7:9a:dc:2e:55:83:ec:
         9b:85:42:11:08:87:30:4f:85:0e:9f:bc:5a:aa:ad:bd:51:e9:
         c5:c8:b7:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:08:29 2026 by rpki-client